Go to main content

Creating and Using Oracle® Solaris Kernel Zones

Exit Print View

Updated: December 2018
 
 

Authorizing Non-Root Users to Perform Kernel Zone Live Migration Operations

The Zone Migration rights profile enables a non-root user to use zoneadm migrate to migrate a kernel zone by using live migration.

The following output displays authorizations for a user kz-user1 with the Zone Migration rights profile:

$ auths kz-user1
solaris.admin.wusb.read,solaris.mail.mailq,solaris.network.autoconf.read,solaris.zone.migrate/vzl-112
$ profiles kz-user1
Zone Migration
Basic Solaris User
All

The user must also have Zone Configuration rights profile on the target system to create the configuration of the migrated zone.

For information about how to assign and manage rights profiles on Oracle Solaris, refer to Securing Users and Processes in Oracle Solaris 11.3.